Question for the Group??

[Snow Jacob C KPWA <JacobSC () kpt nuwc navy mil>]

Kind of an add on question to this but slightly off topic is what is the
benefit for running this configuration on a Linux machine/machines vs.
running this setup on a win2k server/pro box?

Thank you,
 
Jacob Snow
jacobsc () kpt nuwc navy mil
(360)315-3487
NAVSEA Intern

-----Original Message-----
From: Kenneth G. Arnold [mailto:bkarnold () cbu edu] 
Sent: Monday, February 10, 2003 1:39 PM
To: Snort-users () lists sourceforge net
Subject: Re: [Snort-users] Access denied for user: '@192.168.0.1' -SNORT-

It looks like the host where this snort process is trying to run does not 
have write access to the mysql database located at 192.168.0.69 connecting 
as user sensor1.  Is 192.168.0.1 the host where snort is actually 
running?  I am confused as to why the error message doesn't mention user 
sensor1@192.168.0.1 if that is the case.  There doesn't appear to be a user 
specified in the error message yet the log shows that it knows the user is 
sensor1.  Anyway, you need to make sure that the MySQL database has write 
permission for user sensor1 connecting from 192.168.0.1 (or wherever your 
snort machine is located).  Page 19 of the Snort Installation Manual for 
Snort, MySQL and ACID on Redhat 7.3 describes how to do this for a user 
snort from both the localhost and from all hosts. I would recommend that 
you only allow access from the specific hosts that need it. That 
documentation is located at 
http://www.snort.org/docs/snort-rh7-mysql-ACID-1-5.pdf

Ken

At 12:46 PM 2/10/03 -0800, mike Hughes wrote:
> Whats up guys...i am folowing this as my refernce:
> http://www.sans.org/rr/intrusion/practical_guide.php
> Im on the second to last step and am stuck and cant figure it out...Im a 
> noob to mysql tooo im getting this error:
> database: mysql_error: Access denied for user: '@192.168.0.1' to database 
> 'snort'
> Fatal Error, Quitting..



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users